Description:

This step creates a new Microsoft Entra ID group.

The Create EntraID Group workflow step connects to Microsoft Entra ID (formerly Azure Active Directory) and creates a new security group or Microsoft 365 group within the configured tenant.

The step creates the group using the specified group name and optionally allows a description and parent group to be provided. These values can be entered directly or supplied dynamically using FlowWright workflow variables.

The step supports:

• Microsoft Entra ID group creation
• Configurable Entra ID connections
• Optional group description
• Optional parent group assignment
• Dynamic property values using workflow variables
• Integration with Microsoft Graph through FlowWright connections

This step can be used for:

• Employee onboarding
• Department provisioning
• Project team creation
• Security group administration
• Identity lifecycle management
• Environment provisioning
• Business process automation

Usage:

The Create EntraID Group step is typically placed after an approval or provisioning step in a workflow that creates new Microsoft Entra ID groups.

The workflow creates the specified Microsoft Entra ID group using the configured connection.

Once the group has been created, later workflow steps can:

• Add users to the group
• Assign Microsoft 365 licenses
• Configure application access
• Notify administrators
• Synchronize external systems
• Continue identity lifecycle management processes

You need to set up an EntraID connection. Go to Integration > Connections > Generic Connections. On the Manage Generic Connections page, click Actions > Create. A sample connection is included here for reference. 

Example:

Let’s build and execute the “clsCreateEntraIDGroupDef” example:

• Create a new process definition named “clsCreateEntraIDGroupDef” and open it in designer mode. 
• Drag a “clsCreateEntraIDGroup” step to the canvas.
• Connect the dots between the “Start” and “clsCreateEntraIDGroup” steps.
• Click the "clsCreateEntraIDGroup" step to configure its "Required" properties. Provide a name for the step. Select the EntraID connection from the drop-down list. Enter the “Group Name”. Click the Save button. Note: Click the "AI Predict" button to have the Copilot add new process steps that match your process description. 

• Click the "clsCreateEntraIDGroup" step to configure its "Optional" properties. Provide a Description and Parent Group Name. Click the Save button.

• The “Logging” configuration is necessary for documentation and also measures workflow progress and percent complete. This is achieved by configuring the step state and percent fields individually, as shown below. Configure the “Logging” using the following properties.

• Save the Process Definition. Create a new Process Instance and execute it. When the workflow reaches the Create Group step, FlowWright connects to the configured Microsoft Entra ID tenant and attempts to create the specified group. If the group is successfully created, the workflow follows the Created return path. If the group cannot be created—for example, because a group with the same name already exists, required information is missing, or the connection cannot be established—the workflow follows the NotCreated return path.

Tips:

• Verify that the Microsoft Entra ID connection has been configured before using this step.
• Use workflow variables to dynamically specify the group name and optional properties.
• Choose descriptive and unique group names to simplify administration.
• Use the optional description field to document the group's purpose.
• Verify the parent group before assigning hierarchical relationships.
• Use the Created and NotCreated return paths to implement appropriate success and error handling.
• Combine this step with Add EntraID User To Groups or Add EntraID Users To Group steps to automate complete group provisioning.

Notes:

• A valid Microsoft Entra ID connection must exist before this step can execute.
• The configured connection must have sufficient Microsoft Graph permissions to create Microsoft Entra ID groups.
• Group names should comply with your organization's Microsoft Entra ID naming conventions.
• If specified, the parent group must already exist.
• Network connectivity or authentication issues may prevent successful group creation.
• The workflow should include appropriate error handling for the NotCreated return path.

Definition Sample:

You may download the sample definition(s) from the link provided and later import them (drag-and-drop) into your FlowWright Process Definition (XML file) or Form Definition (HTML file) page.

Note: Verify and complete any missing configuration after importing the sample, including:

• Microsoft Entra ID connection
• Group name mapping
• Description mapping
• Parent group mapping
• Workflow variable mappings
• Microsoft Graph permissions
• Environment-specific settings

After verifying the configuration, save the Process Definition before execution.

Click here to download the sample file.